c248d18d7e414146c241b2e2befc905e6e17e72ad3f7674e73d1f36f1f170ef6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c248d18d7e414146c241b2e2befc905e6e17e72ad3f7674e73d1f36f1f170ef6
Size

824KB
Sample

221003-w9w4zsbbap
MD5

6a10e6c20c018d6a6d8eba0e38dbe5e1
SHA1

1eac630f7cbd303906ec28a1f3bf9e40f11b0591
SHA256

c248d18d7e414146c241b2e2befc905e6e17e72ad3f7674e73d1f36f1f170ef6
SHA512

4df4b8be37da77121343aa09160e9b8a244ea6b676919e80d0e12ee8877d83af5200343aef5df76faf36919b09f95db329678cd923c81737db38e4b25727e68b
SSDEEP

12288:3wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888J:jNzCtUpQ9WWPBSSRMTEpXNu

Score

7^/10

Malware Config

Targets

- Target
  
  c248d18d7e414146c241b2e2befc905e6e17e72ad3f7674e73d1f36f1f170ef6
- Size
  
  824KB
- MD5
  
  6a10e6c20c018d6a6d8eba0e38dbe5e1
- SHA1
  
  1eac630f7cbd303906ec28a1f3bf9e40f11b0591
- SHA256
  
  c248d18d7e414146c241b2e2befc905e6e17e72ad3f7674e73d1f36f1f170ef6
- SHA512
  
  4df4b8be37da77121343aa09160e9b8a244ea6b676919e80d0e12ee8877d83af5200343aef5df76faf36919b09f95db329678cd923c81737db38e4b25727e68b
- SSDEEP
  
  12288:3wCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEc888888888888W8888888J:jNzCtUpQ9WWPBSSRMTEpXNu
Score

7^/10
- Drops startup file
- Loads dropped DLL
- Drops autorun.inf file
  Malware can abuse Windows Autorun to spread further via attached volumes.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Replication Through Removable Media

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Replication Through Removable Media

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2